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METHOD FOR MONITORING THE OPERATING READINESS OF AT LEAST 
ONE MEMORY ELEMENT ASSIGNED TO AN ELECTRONIC UNIT 

The present invention relates to a method for monitoring the 
operating readiness of at least one memory element that is 
assigned to an electronic unit, and an electronic unit for 
executing the method. The present invention also relates to 
a computer program for executing the method according to the 
present invention . 

Background Information 

Flash EPROMs, for example, are used for the storage of 
program code in electronic units such as, for example, 
engine control units. It is also common in modern 
controllers to integrate flash memory elements to execute 
programs as quickly as possible. It has to be pointed out, 
however, that the integrated flash memory element is 
substantially more expensive than an external flash memory 
IC (integrated circuit) which, however, is slower in 
comparison with the former. For this reason, external 
(stand-alone) flash memory ICs are used for program sections 
which do not affect the performance of the overall system. 

This creates the problem that different technologies are 
used to manufacture the different ICs for the computers and 
the memories which therefore run on different operating 
voltages. Even on the computer, depending on the technology, 
the operating voltages for the computer kernel and the 
operating voltage of the flash memory may be different. As a 
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rule, the operating voltage of the flash memory is higher 

* 

than that of the computer kernel. However, program execution 
is ensured only when the operating voltage for the memory in 
which the program to be executed is stored and the operating 
5 voltage for the computer kernel are within a specified 
tolerance zone. 

Low voltage recognition of the operating voltages and 
associated error handling are necessary for a supply voltage 
10 dip of the engine control unit. 

A method and a device for monitoring an electronic computing 
unit are known from the publication DE 196 01 804 Al . In the 
method described, in the event of an interruption in the 

15 supply voltage and following initialization of the computing 
unit, a reset signal is transmitted from a voltage 
monitoring device to the computing unit and, after the 
signal is received, the operating state of the computing 
unit is checked by comparing a content of a volatile memory 

20 cell with a fixedly predefined code. A decision regarding 
the further control sequence is made based on this check. 
After triggering a reset signal, the content of a volatile 
memory cell is compared with a predefined code. Each reset 
signal thus triggers a check during which a test is made on 

2 5 whether the content of the volatile memory is still 

completely present. This makes it possible to differentiate 
between interruptions in the voltage supply which cause 
errors in the computing unit and such interruptions in the 
voltage supply which do not cause errors in the computing 

3 0 unit. 

Depending on the size of a dip in the supply voltage it may 
occur that the highest operating voltage is no longer 
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sufficient for part of the flash memory, but 'the other 
operating voltages for the other parts of the flash memory 
and the computer kernel are still within the specified 
tolerance. Normal program execution is thus no longer 
5 possible under these circumstances because it is assumed 
that the entire flash memory must always be available. 

A low voltage on the operating voltage is normally detected 
via a threshold value using hysteresis. However, a 
10 prerequisite for this is that the threshold value is higher 
than the memory's minimum operating voltage, but also lower 
than the lowest operating voltage caused by interruptions. 
Such an analysis is indeed no longer possible when the flash 
memory's operating voltage has a very narrow tolerance. 

15 

Advantages of the Invention 

The method according to the present invention is used for 
monitoring the operating readiness of at least one memory 
20 element that is assigned to an electronic unit. The 

operating readiness of the memory element or memory elements 
is checked by monitoring the electronic unit's supply 
voltage. The error-free operation of the entire electronic 
unit may be ensured in this way. 

25 

The method according to the present invention makes it 
possible in particular to monitor multiple memory elements, 
external as well as internal elements, which require 
different operating voltages, and makes it also possible to 
30 make an assertion about which of the different memory 

elements are still operational at a certain supply voltage. 

Instead of monitoring the operating voltage or operating 
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voltages of the at least one memory element , 'the supply- 
voltage of the electronic unit, e.g., an engine controller, 
is thus monitored. This makes it possible to detect the 
shortfall of the operating voltage at the at least one 
5 memory element in a timely manner. 

The analysis of the threshold value shortfall, by using a 
provided computing unit for example, may take place in 
different ways, depending on the accuracy and response time 
10 requirements and also as a function of the overall concept 
for the engine controller . 

One approach provides that the supply voltage is initially 
divided down. The supply voltage divided down may then be 
15 preferably cyclically measured using an analog-digital 

converter (ADC) , for example, cyclically read in (polling) 
at a general purpose input of the computing unit and/or 
analyzed at an interrupt input of the electronic computing 
unit . 

20 

Another approach provides that the supply voltage is entered 
into a comparator whose output signal is analyzed for 
monitoring the supply voltage. The analysis takes place, for 
example, in that the output signal is cyclically read in 
25 (polling) at a general purpose input of the electronic 

computing unit and/or analyzed at an interrupt input of the 
electronic computing unit. 

An embodiment of the present invention provides that the 
3 0 operating voltage of the at least one memory element is 
additionally monitored. 

If, for example, multiple memory elements are provided which 
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require operating voltages of varying intensity, then, in 
the event of detection of a low voltage at one of the memory 
elements, the computing unit may only process program code 
from memory elements to which an adequate operating voltage 
5 is applied. This makes it possible, in a motor vehicle for 
example, to continue to ensure a limited functionality 
(e.g., at the start). As soon as it is detected that the 
operating voltage is in the specified range for all memory 
elements or for all parts of a memory element, e.g., of a 
10 flash memory element, the entire program code may be re- 
utilized . 

The electronic unit according to the present invention, 
e.g., an engine control unit, is operated using a certain 

15 supply voltage. At least one memory element is assigned to 
the unit. Memory elements may be flash memory elements but 
also other known memory elements; memory elements of a 
different type may also be used. The electronic unit is 
designed in such a way that, for monitoring the readiness 

2 0 for operation of the at least one memory element, monitoring 
of the electronic unit's supply voltage is provided. 

A suitable device is used for monitoring that, based on the 
monitored electronic unit's supply voltage, allows the 
25 determination as to which of the memory elements is 

operational. The reliable operation of the entire electronic 
unit may thus be ensured. 

The electronic unit preferably has a computing unit, e.g., a 
30 microprocessor or a controller. 

An embodiment of the present invention provides an analog- 
digital converter (ADC) for monitoring the supply voltage. 



NY01 708720 v 1 



An alternative design provides a comparator for monitoring 
the supply voltage. 



A design is of course possible in which a comparator as well 
5 as an analog-digital converter are provided, so that the 

different methods for monitoring the supply voltage may be 
combined in any way to achieve a desired redundancy. 

The computer program according to the present invention 
10 includes program code means to execute an above-described 

method. This method is executed on a computer or a suitable 
computing unit. The computing unit is preferably an 
electronic computing unit in an electronic unit according to 
the present invention. 

15 

The computer program product according to the present 
invention provides that the program code means are stored on 
a computer readable data medium. 

20 Further advantages and embodiments of the present invention 
arise from the description and the enclosed drawing. 

It shall be understood that the above-mentioned features and 
the features which will be explained below are usable not 
25 only in the combination cited, but also in other 

combinations or alone without leaving the scope of the 
present invention. 

The present invention is illustrated in the drawing based on 
3 0 an exemplary embodiment and is explained in greater detail 
in the following with reference to the drawing. 

Figure 1 shows a preferred embodiment of the electronic 
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unit according to the present invention in a 
schematic representation. 

Figure 2 shows a preferred embodiment of the method 
5 according to the present invention in a flow 

chart . 

An electronic unit according to the present invention, an 
engine control unit 10 in this case, is schematically 
10 illustrated in Figure 1. Recognizable are an electronic 

computing unit 12, namely a controller 12 , an analog-digital 
converter (ADC) 14, a comparator 16, a first memory element 
18, and a second memory element 20. Memory elements 18 and 
20 are flash memory elements 18 and 20 in this case. 

15 

Controller 12 has a general purpose input 22 and an 
interrupt input 24 . The required operating voltage of 
controller 12 differs from the required operating voltages 
of first and second memory elements 18 and 20, which in turn 
20 require operating voltages of different intensity. 

The supply voltage of engine control unit 10 is used for 
monitoring the operating readiness of both memory elements 
18 and 20. This offers various possibilities. At first, the 
25 supply voltage of engine control unit 10 may be divided 
down, and the supply voltage divided down may then be 
measured using ADC 14, read in at general purpose input 22 
and/or analyzed at interrupt input 24 . 

30 Alternatively or also additionally, the supply voltage may 
be entered into comparator 16 whose output signal is then 
preferably cyclically read in at general purpose input 22 
for analysis or analyzed at interrupt input 24 . 
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A method according to the present invention is represented 
in Figure 2 in a flow chart. In a step 30, engine control 
unit 10 is started up. For monitoring the operating 
readiness of both memory elements 18 and 20, the supply 
5 voltage of engine control unit 10 in monitored in a step 32. 
If, based on the supply voltage, it is detected that, for 
example, just first memory element 18 is operational, 
controller 12 will only read out and process program code 
from this memory element 18 in a step 34 until the operating 
10 voltage of second memory element 20 is also in the specified 
range again. 

If monitoring does not yield a value below threshold, then 
program code from both memory elements 18 and 2 0 is 
15 continued to be processed in a step 36. 

A particular advantage of the method according to the 
present invention lies in the fact that the demands on the 
supply voltage of engine control unit 10 are lower than on 
20 the operating voltages of memory elements 18 and 20 since 
temporary voltage dips may be bypassed, e.g., at the start 
of the motor vehicle, in particular when the battery is 
weak, and/or during operation. 
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